linear

SUSPICIOUS: the overall purpose is coherent, but the skill depends on a non-official third-party CLI and forwards a Linear API token to it. The install path is registry-based and publicly sourced, so this is not confirmed malware, but mismatched auth/docs and reliance on external CLI code make the trust model weaker than a direct official Linear integration.